Difference between revisions of "FW Monitor examples"
From Tech-Wiki
| Line 8: | Line 8: | ||
Filtering based on a Host pair" | Filtering based on a Host pair" | ||
| − | fw monitor -e "accept host(10.1.1.10) or host(200.0.0.2);" | + | fw monitor -e "accept host(10.1.1.10) or host(200.0.0.2) and net(10.0.0.0,8) and port(22);" |
Filtering based on application: | Filtering based on application: | ||
Revision as of 19:43, 8 November 2017
Filtering based on a single Host: (no matter if it is the source or destination)
fw monitor -e "accept host(10.1.1.10);"
Filtering based on a Host pair"
fw monitor -e "accept host(10.1.1.10) or host(200.0.0.2) and net(10.0.0.0,8) and port(22);"
Filtering based on application:
fw monitor -e 'accept port(25);'
Strict filter:
fw monitor -e "src=10.1.1.10 and dst=200.1.1.11 and dport=80,accept;"